Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
File: 9JupkRTr2r1uTL029s1HWzPPE4Y.mft (raw, json)
Hash identifier: ygEe/B42gI/cA1ib1hkMdaookEQNUEh3pE8zNzQkoB0=
Subject key identifier: 5D:1C:C8:E9:4B:48:A8:93:6A:B2:D7:4F:C2:DA:34:73:F5:DE:76:A8
Authority key identifier: F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
Certificate issuer: /CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Certificate serial: 019FAA879259B453E09F65C2E5FA67B50194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
Manifest number: 0CD2
Signing time: Tue 28 Jul 2026 21:00:39 +0000
Manifest this update: Tue 28 Jul 2026 21:00:39 +0000
Manifest next update: Wed 29 Jul 2026 21:00:39 +0000
Files and hashes: 1: 9JupkRTr2r1uTL029s1HWzPPE4Y.crl (hash: WaElOogPGDDgT2P9DvI4pa663fKrLcts6s+EtL1KrpA=)
2: QBd5Wpp5kWkoCSM4_95uiC5JDV0.roa (hash: flLVepDAjYfRnttnJvSS11YgDPxXUtJLpwyzAOjne3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:92:59:b4:53:e0:9f:65:c2:e5:fa:67:b5:01:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49ba99114ebdabd6e4cbd36f6cd475b33cf1386
Validity
Not Before: Jul 28 21:00:39 2026 GMT
Not After : Jul 29 21:00:39 2026 GMT
Subject: CN=5d1cc8e94b48a8936ab2d74fc2da3473f5de76a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:60:33:8e:a4:f2:20:64:b4:0c:73:4f:45:df:
6b:43:de:cc:88:9d:e2:ac:f1:00:2a:f5:b4:b9:bc:
13:3c:e4:ec:e5:2b:d3:4b:a5:bd:27:2f:3f:20:d2:
53:12:5f:a5:df:01:33:e6:fa:b6:a9:f6:4f:8e:07:
b8:9d:b1:95:41:d4:1c:6d:c7:04:b1:2d:dc:7b:8e:
9d:69:be:d8:d1:cb:be:25:11:67:02:04:5e:37:0b:
db:4e:d7:d9:27:7c:71:d7:03:76:33:28:c0:3a:4e:
56:98:33:9d:bd:82:26:6f:8c:6e:95:b8:20:7a:70:
0e:18:cc:5c:97:2a:c2:e8:4f:24:6d:4f:1f:d0:55:
7a:48:2b:54:41:7e:81:f3:c4:ea:97:eb:0a:f2:1a:
17:77:bc:ec:f2:9b:32:f7:5a:27:52:97:92:9b:1c:
42:6e:04:d7:07:e9:be:61:23:0b:a1:28:55:39:67:
3b:b9:9a:f2:15:84:00:6d:e5:b9:8c:ec:e9:a9:f7:
ef:06:a6:63:11:54:0a:a3:a2:b4:ad:a3:5d:42:27:
74:97:75:2c:61:e3:28:f3:46:2c:00:0d:06:e0:98:
0f:5c:be:ac:cb:35:bc:fc:d5:63:49:d5:f0:da:9a:
28:b9:77:d0:ed:a2:6b:42:76:0f:70:d5:ed:73:5a:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:1C:C8:E9:4B:48:A8:93:6A:B2:D7:4F:C2:DA:34:73:F5:DE:76:A8
X509v3 Authority Key Identifier:
keyid:F4:9B:A9:91:14:EB:DA:BD:6E:4C:BD:36:F6:CD:47:5B:33:CF:13:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JupkRTr2r1uTL029s1HWzPPE4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e4db7-45a8-4993-b384-9a6ee486eff7/1/9JupkRTr2r1uTL029s1HWzPPE4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ec:b5:14:57:72:a7:38:61:ea:1b:d6:ee:07:95:93:24:24:61:
97:bc:85:45:7d:a6:00:fe:d2:6b:b3:72:ab:3e:73:48:f1:cb:
82:0a:f1:00:4a:ca:8c:9f:21:d8:97:bf:85:9b:c5:33:88:05:
20:74:a7:13:6a:bf:51:a4:1a:fc:15:db:cf:5f:da:e1:fe:15:
fd:97:ee:b6:db:9a:e4:44:72:cb:c0:30:fc:79:11:64:62:95:
c7:f3:24:f2:05:25:0c:af:df:fe:24:f2:05:a5:62:8d:6f:28:
08:ed:e7:b0:01:80:12:97:f8:36:92:6a:2a:a0:1e:45:49:f5:
37:54:ad:36:1e:7e:e0:1e:ba:19:d8:cb:8d:1c:1c:2f:a5:d3:
f9:a0:eb:f0:f6:d2:ac:d8:4c:68:b6:a8:ce:ba:2b:26:fd:75:
2e:c9:ac:92:26:28:71:49:2d:2c:78:1f:e3:3a:87:8b:8f:5f:
ad:fb:d5:89:3d:9c:ea:ad:aa:f0:00:1f:f4:79:4f:09:ae:a6:
6c:5e:79:60:9c:a1:85:d0:6c:84:f9:4d:e8:63:56:57:0a:bc:
c9:a8:96:82:b2:1b:93:fb:48:54:7f:4d:8a:ba:84:d0:34:9e:
d7:0b:db:b5:89:c2:be:5a:ce:b1:7c:9d:d7:59:28:65:4d:98:
84:1d:39:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:54:42 2026 by rpki-client